İçeriğe atla
Noroxi

Yayın tarihine göre

Aralık 2005: sömürülen ve yeni ciddi CVE kayıtları

44 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2005-3945
    35İzleyin

    The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predicta

    YüksekCVSS 7,8İstismar yokEPSS %12

    microsoft · windows 20001 Ara 2005

  • CVE-2005-2923
    19İzleyin

    The IMAP server in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to cause a denial of service

    OrtaCVSS 4,0İstismar yokEPSS %10

    ipswitch · imail server6 Ara 2005

  • CVE-2005-4089
    35İzleyin

    Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using t

    YüksekCVSS 7,1İstismar yokEPSS %22

    microsoft · ie8 Ara 2005

  • CVE-2005-4131
    36İzleyin

    Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted att

    OrtaCVSS 6,8Kavram kanıtıEPSS %31

    microsoft · excel9 Ara 2005

  • CVE-2005-4134
    24İzleyin

    Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumptio

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    mozilla · firefox9 Ara 2005

  • CVE-2005-4145
    40Planlayın

    The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space

    OrtaCVSS 6,5SilahlaştırılmışEPSS %43

    lyris technologies inc · listmanager10 Ara 2005

  • CVE-2005-4197
    34İzleyin

    tunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands via a link in the a parameter, which is exec

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    nortel · ssl vpn13 Ara 2005

  • CVE-2005-3352
    39İzleyin

    Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev a

    OrtaCVSS 4,3İstismar yokEPSS %73

    apache · http server13 Ara 2005

  • CVE-2005-2829
    26İzleyin

    Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overla

    OrtaCVSS 5,1İstismar yokEPSS %18

    microsoft · ie14 Ara 2005

  • CVE-2005-2830
    31İzleyin

    Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext,

    OrtaCVSS 5,0İstismar yokEPSS %35

    microsoft · ie14 Ara 2005

  • CVE-2005-2831
    39İzleyin

    Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute a

    YüksekCVSS 7,5İstismar yokEPSS %30

    microsoft · ie14 Ara 2005

  • CVE-2005-3652
    35İzleyin

    Heap-based buffer overflow in Citrix Program Neighborhood client 9.0 and earlier allows remote attackers to execute arbitrary code via a lon

    YüksekCVSS 7,5İstismar yokEPSS %15

    citrix · ica program neighborhood client16 Ara 2005

  • CVE-2005-4360
    57Planlayın

    The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitr

    YüksekCVSS 7,8Kavram kanıtıEPSS %86

    microsoft · internet information services19 Ara 2005

  • CVE-2005-4411
    49Planlayın

    Buffer overflow in Mercury Mail Transport System 4.01b allows remote attackers to execute arbitrary code via a long request to TCP port 105.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %64

    david harris · mercury mail transport system20 Ara 2005

  • CVE-2005-4267
    50Planlayın

    Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP command that ends wi

    YüksekCVSS 7,5SilahlaştırılmışEPSS %66

    qualcomm · worldmail21 Ara 2005

  • CVE-2005-4459
    44Planlayın

    Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, a

    KritikCVSS 10,0İstismar yokEPSS %14

    vmware · ace21 Ara 2005

  • CVE-2005-4466
    34İzleyin

    Heap-based buffer overflow in the SIPParser function in i3sipmsg.dll in Interaction SIP Proxy before 3.0.011 allows remote attackers to caus

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    interactive intelligence · interaction sip proxy21 Ara 2005

  • CVE-2005-4504
    35İzleyin

    The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safari and TextEdit, allo

    YüksekCVSS 7,8Kavram kanıtıEPSS %11

    apple · safari22 Ara 2005

  • CVE-2005-4556
    33İzleyin

    PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    icewarp · web mail28 Ara 2005

  • CVE-2005-4560
    56Planlayın

    The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Wind

    YüksekCVSS 7,5SilahlaştırılmışEPSS %86

    microsoft · windows 2003 server28 Ara 2005

  • CVE-2005-4573
    34İzleyin

    PHP remote file include vulnerability in plog-admin-functions.php in Plogger Beta 2 allows remote attackers to execute arbitrary code via a

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    plogger · plogger29 Ara 2005

  • CVE-2005-1924
    40Planlayın

    The G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to execute arbitrary commands via shell metacharact

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    squirrelmail · gpg plugin31 Ara 2005

  • CVE-2005-1939
    39İzleyin

    Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary files via ".." (dot dot)

    OrtaCVSS 5,0Kavram kanıtıEPSS %63

    ipswitch · whatsup small business31 Ara 2005

  • CVE-2005-2340
    38İzleyin

    Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a crafted (1) QuickTime Ima

    YüksekCVSS 7,5Kavram kanıtıEPSS %25

    apple · quicktime31 Ara 2005

  • CVE-2005-3357
    28İzleyin

    mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote a

    OrtaCVSS 5,4İstismar yokEPSS %24

    apache · http server31 Ara 2005

  • CVE-2005-3525
    43Planlayın

    Stack-based buffer overflow in an ActiveX control for the installer for Adobe Macromedia Shockwave Player 10.1.0.11 and earlier allows remot

    KritikCVSS 9,3İstismar yokEPSS %19

    adobe · shockwave player31 Ara 2005

  • CVE-2005-3539
    34İzleyin

    Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary commands via (1) the notify

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    hylafax · hylafax31 Ara 2005

  • CVE-2005-3653
    46Planlayın

    Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before

    KritikCVSS 10,0İstismar yokEPSS %18

    ca · brightstor arcserve backup31 Ara 2005

  • CVE-2005-4085
    50Planlayın

    Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote at

    YüksekCVSS 7,5SilahlaştırılmışEPSS %65

    bluecoat · webproxy31 Ara 2005

  • CVE-2005-4593
    34İzleyin

    PHP remote file inclusion vulnerability in phpDocumentor 1.3.0 rc4 and earlier, when register_globals is enabled, allows remote attackers to

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    joshua eichorn · phpdocumentor31 Ara 2005

  • CVE-2005-4703
    28İzleyin

    Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains

    OrtaCVSS 5,0Kavram kanıtıEPSS %25

    apache · tomcat31 Ara 2005

  • CVE-2005-4717
    25İzleyin

    Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows

    OrtaCVSS 5,0Kavram kanıtıEPSS %16

    microsoft · ie31 Ara 2005

  • CVE-2005-4718
    23İzleyin

    Opera 8.02 and earlier allows remote attackers to cause a denial of service (client crash) via (1) a crafted HTML file with a "content: url(

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    opera · opera browser31 Ara 2005

  • CVE-2005-4734
    42Planlayın

    Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.3 for IIS allows remo

    OrtaCVSS 6,4SilahlaştırılmışEPSS %55

    rsa · authentication agent for web31 Ara 2005

  • CVE-2005-4797
    40Planlayın

    Directory traversal vulnerability in printd line printer daemon (lpd) in Solaris 7 through 10 allows remote attackers to delete arbitrary fi

    OrtaCVSS 5,0SilahlaştırılmışEPSS %29

    sun · solaris31 Ara 2005

  • CVE-2005-4807
    34İzleyin

    Stack-based buffer overflow in the as_bad function in messages.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils befo

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    gnu · binutils31 Ara 2005

  • CVE-2005-4810
    24İzleyin

    Microsoft Internet Explorer 7.0 Beta3 and earlier allows remote attackers to cause a denial of service (crash) via a "text/html" HTML Conten

    OrtaCVSS 5,0İstismar yokEPSS %14

    microsoft · internet explorer31 Ara 2005

  • CVE-2005-4816
    34İzleyin

    Buffer overflow in mod_radius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a denial of service (crash) and possibly execute a

    YüksekCVSS 7,5İstismar yokEPSS %12

    proftpd project · proftpd31 Ara 2005

  • CVE-2005-4823
    44Planlayın

    Buffer overflow in the HP HTTP Server 5.0 through 5.95 of the HP Web-enabled Management Software allows remote attackers to execute arbitrar

    KritikCVSS 10,0İstismar yokEPSS %12

    hp · http server31 Ara 2005

  • CVE-2005-4827
    33İzleyin

    Internet Explorer 6.0, and possibly other versions, allows remote attackers to bypass the same origin security policy and make requests outs

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · ie31 Ara 2005

  • CVE-2005-4832
    43Planlayın

    SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL commands with eleva

    YüksekCVSS 7,5SilahlaştırılmışEPSS %42

    oracle · oracle10g31 Ara 2005

  • CVE-2005-4840
    20İzleyin

    The Outlook Express Address Book control, when using Internet Explorer 6, allows remote attackers to cause a denial of service (NULL derefer

    OrtaCVSS 4,3İstismar yokEPSS %11

    microsoft · outlook express book control31 Ara 2005

  • CVE-2005-4843
    34İzleyin

    The SmartConnect Class control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of th

    YüksekCVSS 7,8İstismar yokEPSS %11

    microsoft · internet explorer31 Ara 2005

  • CVE-2005-4844
    32İzleyin

    The CLSID_ApprenticeICW control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of t

    YüksekCVSS 7,1İstismar yokEPSS %12

    microsoft · internet explorer31 Ara 2005